Ensure systemd Service Files Are Enabled

LowLevel 1Manual reviewyugabytedb

Description

Confirm, and correct if necessary, the YugabyteDB systemd service is enabled.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run systemctl get-default and systemctl list-dependencies <default target> | grep -i yugabyte. The YugabyteDB service (e.g. yugabyted.service, or yb-master/yb-tserver units) must be enabled as a want of the default target and run as the dedicated user with Restart=on-failure.

How it is fixed

Fix method: Guidance or infrastructure patch

Irrespective of package source, YugabyteDB services can be identified because it typically includes the text string "yugabyted". PGDG installs do not automatically register the service as a "want" of the default systemd target. Multiple instances of YugabyteDB services often distinguish themselves using a version number.

Properties

Operating systems: Any
Tags: yugabytedbservice
Reference: CIS YugabyteDB Benchmark v2.0.0 - 1.2 Ensure systemd Service Files Are Enabled